CVE-2023-35998
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects. Successful exploitation requires an attacker to first obtain a valid agent authentication token.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive data and the ability to modify objects, which could lead to serious security consequences.
Recommendation
It is recommended to update the Insider Threat Management Server to version 7.14.3 or later to mitigate this vulnerability. Additionally, implementing further authorization checks in the SOAP endpoints is advisable.
Original NVD description (English source)
A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects. Successful exploitation requires an attacker to first obtain a valid agent authentication token. All versions before 7.14.3 are affected.